tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:56:56:4f:c5:8b:0f:ce:be:f6:d0:db:8b:23:3f:f4:98 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:56:56:4f:c5:8b:0f:ce:be:f6:d0:db:8b:23:3f:f4:98
Serial Number (int): 268257266896828190199759632669324001408152
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:c9:0d:73:c6:e2:ad:be:88:2e:43:4c:ed:0e:34:7a:10:77:8a:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:f2:7d:80:33:93:c0:20:eb:85:1c:ee:97:60:91:93:e0:bc:26:4a
Fingerprint (sha256): 7d:02:10:9b:59:a4:7d:89:b4:c0:ae:6c:38:cd:0c:ff:92:4f:49:9a:87:ba:7d:6e:57:7d:d6:96:f8:9e:eb:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.civinomics.com
blog.civitana.org
civilsocietyeurope.eu
civilsocietymovement.org
civilsocietywg.org
civilsources.com
civilsystems.org
civiltadelgusto.com
civilwar150pinholeproject.com
civilwarandcivilrights.com
civilwarbohemians.com
civilwarbookofdays.org
civilwarcorrespondence.com
civilwarfolkmusic.com
civilwarinthewest.com
civilwarmonths.com
civilwarsisters.com
civilwartails.com
civilwaryears.com
civilwrites.me
civiroglu.net
civitadibagnoregiotour.com
civitaspolitics.org
civitatemcibi.com
civitismo.com
civumcparish.com
tls.automattic.com
www.civilrightstoday.org
www.civilsocietyeurope.eu
www.civilsocietymovement.org
www.civilsocietywg.org
www.civilsources.com
www.civilsystems.org
www.civiltadelgusto.com
www.civilwar150pinholeproject.com
www.civilwarandcivilrights.com
www.civilwarbohemians.com
www.civilwarbookofdays.org
www.civilwarcorrespondence.com
www.civilwarfolkmusic.com
www.civilwarinthewest.com
www.civilwarmonths.com
www.civilwarsisters.com
www.civilwartails.com
www.civilwaryears.com
www.civilwrites.me
www.civiroglu.net
www.civitadibagnoregiotour.com
www.civitaspolitics.org
www.civitatemcibi.com
www.civitismo.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqhLAcIirnGQgqecHE2
heFHe6bPVnfG60/rn8eYYBG6afjaVXXFWcGMEX/vjpRwYtzvqjtKMOLSCGwaipiZ
ve/Iif71eS6dbkgdCJd4XCZuyiJP9P3NER7E9EGdNF0Z1cpXpZgtDNzBr9Vvkfei
ALWLSJs9VCqVj8nGtemO8UCjUQ+hZDYh77XJ7WpDmY/ITDaCi66bhz7bsovK/9Pn
CBHoIValr0V3WJ1XslM3kvGhUhkCFZ+2v/nPFMTmllMo/jRnFpSaPO4ntgbtmYtM
CYF9VMLNccDY6frdZLMGwMSCLC5C9zRoC4dBvCisL3PabNTD+hGBAC9kCOH8KGQZ
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268257266896828190199759632669324001408152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 09:06:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 09:06:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23580245092709441021953404062737644444093128137275049546474205622983477158931209072937075262161762570067164541505661414682793377472293507568271482612859528457140077291091427714423517896381871521244440562836048894335433804028019537156668813250661788933388509829286715545752156157406635623270465199615096404515615271468300062358469555975713006760399915528921726930019280655047720923610542733896567359860299201354498476343434366318136167372930501417761784294162772902161395943325910088447715222031924929732667351852749315604437789590510188969292735910605278061244176762217928948561343714448641265014766297581011954047483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00c90d73c6e2adbe882e434ced0e347a10778ae0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.civinomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.civitana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilsocietyeurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilsocietymovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilsocietywg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civiltadelgusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwar150pinholeproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarandcivilrights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarbohemians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarbookofdays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarcorrespondence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarfolkmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarinthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarmonths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwarsisters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwartails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwaryears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilwrites.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civiroglu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civitadibagnoregiotour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civitaspolitics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civitatemcibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civitismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civumcparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilrightstoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilsocietyeurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilsocietymovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilsocietywg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civiltadelgusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwar150pinholeproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarandcivilrights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarbohemians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarbookofdays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarcorrespondence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarfolkmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarinthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarmonths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwarsisters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwartails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwaryears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilwrites.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civiroglu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civitadibagnoregiotour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civitaspolitics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civitatemcibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civitismo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016310ddce4b0000040300473045022023fb7fec88dd2022fef8831c1f76310cad963a8f6cd1ffc4419e056bb7e21bfa02210085557b17f2411066d5a82544c6190f3ddde25e6e8f0792adcbb5eea6ee1ed3b9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016310ddcec20000040300473045022100cdb94798c089332c233e88cba21e8180dcf1267d428e778aee7d9a25a9599940022069655bcf92fb37be50ce770d2a546cefffd18cc569ab9fa7042c1e6ec04c948e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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